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Listing of the Qajmg 

1 . (Original) In a server, a method comprising: registering a first party as a party 
relying upon a second party's certificate; revoking the second party's certificate 
after registering the first party; and initiating communication with the first party to 
indicate that the second party's certificate has been revoked. 

2. (Original) The method of claim 1 wherein revoking the second party's 
certification further comprises: receiving a request to revoke the second party's 
certificate; and revoking the second party's certificate in accordance with a 
revocation policy associated with the second party's certificate in response to the 
request 

3. (Original) The method of claim 2 wherein initiating communication with the 
first party further comprises sending a revocation message to a machine that is 
associated with the first party. 

4. (Original) The method of claim 3 further comprising the machine associated 
with the first party verifying the authenticity of the revocation message and 
modifying access control information of the machine to indicate the revocation of 
the second party's certificate. 

5. (Currently Amended) The method of claim 2 wherein receiving t he request to 
revoke the second party's certificate comprises accepting the request by 
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authenticating a signature incorporated in the request with one of a list of revoker 
certificates associated with the second party's certificate* 

6. (Original) The method of claim 2 wherein the server initiating communication 
with a first party further comprises the server sending an email message to an 
email address for the first party. 

7. (Original) In a server, a method comprising: registering an user as a party 
relying upon a digital certificate for a web site, the certificate to verify messages 
from the web site; receiving a request to revoke the digital certificate of the web 
site after registering the user; authenticating the request in accordance with a pre- 
defined policy; revoking the digital certificate of the web site in response to the 
request; and initiating communication with the user to indicate that the digital 
certificate of the web site has been revoked. 

8. (Original) The method of claim 7 wherein initiating communication with the 
user to indicate that the digital certificate of the web site has been revoked further 
comprises: sending a message directly to a machine associated with the user, to 
indicate that the web site's digital certificate has been revoked. 

9. (Original) The method of claim 8 further comprising, in the machine used by 
the user: authenticating the message to verify that it was sent by the server; and 
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changing settings for web access to reflect the revocation of the digital certificate 
of the web site. 



10. (Original) The method of claim 7 wherein authenticating the request in 
accordance with a pre-defined policy comprises authenticating a digital signature 
incorporated in the request with a list of digital certificates previously defined as 
revoker certificates for the web site. 



1 1 . (Original) A processor based server system comprising: a registration 
database to register a first party as a relying party for a second party's certificate; a 
revocation module to revoke the second party's certificate after the first party is 
registered; and an interface with a communication network to initiate 



communication to indicate to the first party that the second party's certificate has 
been revoked. 



a 



12. (Original) The processor based server of claim 1 1 further comprising; 
machine readable medium accessible from a processor of the server having stored 
thereon an acceptance policy in accordance with which a revocation request 
received via the interface may be accepted, and further having stored thereon a 
revocation policy in accordance with which the second party's certificate may be 
revoked. 
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13. (Original) The processor based server of claim 12, wherein the revocation 
module is operable to send a revocation message to a machine that is associated 
with the first party, via the interface. 

■ * 

14. (Original) A processor based server comprising: a registration database to 
register a user as a relying party for a digital certificate of a web site, the 
certificate to verify messages from the web site; a machine readable medium 
accessible from a processor of the server having stored thereon an acceptance 
policy in accordance with which a revocation request received via an interface to 
communication network may be accepted, and further having stored thereon a 
revocation policy in accordance with which the digital certificate of the web site 
may be revoked in response to the revocation request; a revocation module to 
revoke the digital certificate of the web site in accordance with the revocation 
policy; and an interface with a communication network to indicate to the user that 
the web site's certificate has been revoked. 

15. (Original) The processor based server of claim 12, wherein the revocation 
module is operable to send a revocation message to a machine operable by the 
user to access the web site. 

1 6, (Currently Amended) A tangible machine readable medium having stored 
thereon data which when accessed by a machine cause the machine to perform the 
method of claim 1 . 
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1 7. (Original) The machine readable medium of claim 1 6 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 2. 



1 8. (Original) The machine readable medium of claim 1 7 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 3 . 

1 9. (Original) The machine readable medium of claim 1 8 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 4. 

20. (Original) The machine readable medium of claim 1 7 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 5. 

2 1 . (Original) The machine readable medium of claim 1 7 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 6. 
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22. (Currently Amended) A tangible m achine readable medium having stored 
thereon data which when accessed by a machine cause the machine to perform the 
method of claim 7. 

23. (Original) The machine readable medium of claim 22 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 8. 

* 

24. (Original) The machine readable medium of claim 23 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 9. 

25. (Original) The machine readable medium of claim 22 having stored thereon 
further data which when accessed by the machine cause the machine to perform 
the method of claim 10. 



7 



PAGE 12/15 1 RCVD AT 3/7/2007 7:15:12 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-5/21 * DNIS:2738300 * CSID:503356141 5 * DURATION (mm-ss):02-30 



